The vulnerability identified as CVE-2025-57939 affects the Blocksera Image Hover Effects – Elementor Addon (version 1.4.4 and earlier). It is classified as a Missing Authorization issue, meaning the addon fails to properly enforce access control checks on certain functions or resources. This misconfiguration can allow unauthorized users to perform actions that should be restricted, impacting the integrity of the system. The CVSS 3.1 base score is 5.3, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, but with integrity impact.

The impact of this vulnerability is limited to integrity, meaning unauthorized modifications or actions could be performed by attackers without proper authorization. There is no reported impact on confidentiality or availability. The medium severity score reflects that while the vulnerability is exploitable remotely without privileges or user interaction, the consequences are limited to integrity violations. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix links are provided, users should monitor Blocksera's official channels for updates. Until a fix is available, review and restrict access permissions to the affected addon where possible to minimize exposure.